T1629 Impair Defenses

Mobile

Adversaries may maliciously modify components of a victim environment in order to hinder or disable defensive mechanisms. This not only involves impairing preventative defenses, such as anti-virus, but also detection capabilities that defenders can use to audit activity and identify malicious behavior. This may span both native defenses as well as supplemental capabilities installed by users or mobile endpoint administrators.

01

platforms

Platforms this applies to.

Android
03

mitigations

ATT&CK mitigations that reduce this.

04

detected by (2)

Data components that detect this.

05

software (2)

Malware and tools associated with this.

06

source

Where this definition is published.